Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: 7uplVNmiSAZxnS4BsUVsNPInLyfL+tMto+TyEwhMDDw=
Subject key identifier: 84:38:43:B2:91:B7:6D:EE:9B:9D:55:62:1D:BB:EC:80:52:D3:15:5C
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019352074265C5557C423EE8B2DACC95D824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 04F0
Signing time: Fri 22 Nov 2024 04:00:27 +0000
Manifest this update: Fri 22 Nov 2024 04:00:27 +0000
Manifest next update: Sat 23 Nov 2024 04:00:27 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: 0nbMRN3DTPfBuQH0M0PhfY+Xw/FsLXO+Qn/rwZouzls=)
2: VLFQ0p78z6yvLoNi8qi0SzcRt4A.roa (hash: ncmbENbsQ00Ayp8Z1sZFNlyLjNORQXJ4UryZR1ZBcPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:42:65:c5:55:7c:42:3e:e8:b2:da:cc:95:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Nov 22 04:00:27 2024 GMT
Not After : Nov 23 04:00:27 2024 GMT
Subject: CN=843843b291b76dee9b9d55621dbbec8052d3155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:d4:44:af:49:0b:f6:e1:54:44:40:68:15:
07:4f:bc:51:75:b2:17:a3:ad:a5:7c:39:4b:08:bf:
d3:a2:05:df:e3:92:de:bc:0e:97:cf:ee:7b:48:20:
3e:ce:d6:06:18:29:73:7e:71:20:cb:1d:da:b2:53:
d6:c0:47:c7:0b:4d:81:08:04:c1:4e:93:ee:9d:1c:
92:9a:f0:47:a7:67:91:3a:23:d5:74:3e:4a:09:ac:
62:54:d8:1e:d3:1d:63:ff:fa:41:27:1a:1e:40:f6:
61:e3:e5:05:9c:21:25:86:bf:69:67:2e:1d:17:0f:
98:20:df:ca:63:f4:08:db:5f:ef:41:ca:bb:c2:78:
a1:05:a7:37:31:ec:d2:ac:6c:44:0a:96:0f:bd:e0:
8b:af:8a:ca:15:05:08:71:88:24:c9:ec:06:e7:b1:
60:cb:2b:03:ee:dc:b4:1e:e1:de:74:8b:b7:12:e9:
10:cd:64:a4:96:8a:5f:b0:cc:0b:cc:68:d4:a4:f9:
c6:ea:1d:00:0b:b1:26:7f:a1:82:33:ca:12:6f:75:
a9:a8:47:27:ce:9c:8f:05:e6:87:7e:0d:13:39:0a:
c1:74:e4:fd:7f:6e:18:56:da:ae:53:42:8a:ee:12:
2d:5e:8c:ea:c5:82:bc:b8:5a:bd:e5:7d:a4:c8:60:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:43:B2:91:B7:6D:EE:9B:9D:55:62:1D:BB:EC:80:52:D3:15:5C
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:39:56:1f:86:69:ec:94:1f:12:7a:68:95:b4:12:16:1b:bb:
ee:df:e6:bb:9e:46:55:fe:0e:8f:23:0e:71:d1:47:c3:3c:4d:
af:79:3a:bd:92:c5:75:60:48:f7:3b:82:4a:42:48:fc:84:30:
7c:fe:9d:86:31:ed:9f:a2:54:61:03:f2:9a:2a:3e:dd:34:75:
5d:3c:4e:2c:a4:a8:08:5d:67:17:6d:c1:6a:5f:ea:86:a1:0f:
15:79:c7:c0:50:ee:68:69:fd:63:39:6e:c9:ce:77:08:1d:86:
48:4f:81:91:56:06:56:6a:5b:1b:b3:18:0d:5b:e9:2d:17:0e:
9b:2b:d9:f8:95:74:ae:6d:40:61:25:68:5b:42:36:84:9d:06:
80:a3:63:53:b7:d1:a7:ba:d1:2e:d2:94:b3:6f:fc:d2:fb:fc:
cc:01:df:47:06:4f:ef:c5:99:fe:d9:b1:a6:01:ee:34:2a:ea:
8a:3a:d1:26:0e:33:43:c7:03:ef:6f:ea:f8:60:a1:f1:9c:9a:
32:e9:82:97:fd:e2:bd:2f:5e:23:9b:99:14:bd:e8:12:36:c0:
a3:e8:42:d4:e2:f9:25:23:15:c7:65:6d:f5:46:2d:cd:01:b4:
69:6b:90:91:13:65:0e:93:60:f2:76:b2:73:2c:02:50:4b:14:
23:09:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:11:19 2024 by rpki-client on console-ams.rpki-client.org